4345d182c96a72986ec7c2c1b1d3e4015e1085764b86dc03b119784d42055a4e | Triage

Sharing

General

Target

4345d182c96a72986ec7c2c1b1d3e4015e1085764b86dc03b119784d42055a4e
Size

2.0MB
Sample

221125-sbce5sab41
MD5

828f641f9f191b59bea3a7acc019f2f7
SHA1

14d27fdeab1c9ed6316c33d30f20a5bc3a00c026
SHA256

4345d182c96a72986ec7c2c1b1d3e4015e1085764b86dc03b119784d42055a4e
SHA512

bc0c530bdd42f098c1484ccf6d282642bd4dd331d3cff8e957dbeb0d1dde4feced99df0cff41db59b1f5e5e9bbe3d5a5cd82d7e660c5a89c7758e78ec37626a5
SSDEEP

24576:h1OYdaOPSTrzeCSs8imZBnphJGK5L5do5bhpWp5YDa3u0ixtU6fjviyCoIeEPUrL:h1OsTfs8imRhJHL5W5VpgHir7rwy

Score

8^/10

adware discovery spyware stealer

Malware Config

Targets

- Target
  
  4345d182c96a72986ec7c2c1b1d3e4015e1085764b86dc03b119784d42055a4e
- Size
  
  2.0MB
- MD5
  
  828f641f9f191b59bea3a7acc019f2f7
- SHA1
  
  14d27fdeab1c9ed6316c33d30f20a5bc3a00c026
- SHA256
  
  4345d182c96a72986ec7c2c1b1d3e4015e1085764b86dc03b119784d42055a4e
- SHA512
  
  bc0c530bdd42f098c1484ccf6d282642bd4dd331d3cff8e957dbeb0d1dde4feced99df0cff41db59b1f5e5e9bbe3d5a5cd82d7e660c5a89c7758e78ec37626a5
- SSDEEP
  
  24576:h1OYdaOPSTrzeCSs8imZBnphJGK5L5do5bhpWp5YDa3u0ixtU6fjviyCoIeEPUrL:h1OsTfs8imRhJHL5W5VpgHir7rwy
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2

adwarediscoveryspywarestealer